03-13-2012 02:49 PM
Hi guys,
I’m wondering if there is a way to configure CSS11503 running 8.10 so that the servers in the content rules can see the client port number??
The servers can see the client IP, but not the port!! It seems when forwarding packets to the servers in the content rule, the CSS uses a new high-number port when communicating with servers.
Thanks
03-16-2012 12:46 PM
I opened a case with cisco, and they said that is impossible with CSS. However, it is possible in the ACE with inspection.
03-19-2012 12:39 PM
I might be wrong, but afaik it depends on the type of balancing method used.
As long as the CSS only needs to nat the destination it won't change the client source port.
As soon as it get's a Layer4 rule it will intercept and setup a new connection and thus cause higher port numbers.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: